Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/A8vNe6XF8S4FBcni4P6WJCoQ6EA.roa
File:                     A8vNe6XF8S4FBcni4P6WJCoQ6EA.roa (raw, json)
Hash identifier:          +PgddyrkV50kFZFlw0xw0aj745nfqRpcnhSySNnVXBw=
Subject key identifier:   03:CB:CD:7B:A5:C5:F1:2E:05:05:C9:E2:E0:FE:96:24:2A:10:E8:40
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       01856EEFD612959197E17611A108A98258D6
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/A8vNe6XF8S4FBcni4P6WJCoQ6EA.roa
Signing time:             Sun 01 Jan 2023 20:04:49 +0000
ROA not before:           Sun 01 Jan 2023 20:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205148
IP address blocks:        93.159.187.0/24 maxlen: 24
                          2a00:1578:100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:ef:d6:12:95:91:97:e1:76:11:a1:08:a9:82:58:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Jan  1 20:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=03cbcd7ba5c5f12e0505c9e2e0fe96242a10e840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:4a:f2:c4:f9:f3:43:44:03:63:a5:4a:66:
                    27:e1:a0:44:34:04:95:f3:d3:46:e4:d4:ca:60:7d:
                    f2:c4:27:3e:a8:07:0b:cc:c8:fa:21:7a:a0:05:0c:
                    93:66:63:b4:cc:40:34:16:91:3f:03:14:58:27:04:
                    8c:ee:8e:4e:3c:b1:fb:a9:e7:5b:65:ed:9c:6c:5b:
                    13:02:e6:f5:5f:b5:a9:e7:cc:3a:c6:0a:86:56:37:
                    08:d7:4b:9c:24:3d:a1:f3:ff:e6:e1:18:26:23:6f:
                    d7:8c:ba:7a:97:04:22:e2:54:a1:09:52:82:f0:73:
                    95:af:f6:23:b3:19:f2:94:7c:9a:09:82:74:38:77:
                    2d:46:24:74:1d:1d:15:2e:1f:85:f8:df:7c:2e:8e:
                    4b:6e:ab:a4:58:1e:e9:ef:ea:3c:bd:a0:c2:be:68:
                    ca:f9:f8:c6:f5:30:b1:2d:77:7b:87:74:69:97:40:
                    27:11:49:16:fa:ec:c9:2c:44:b8:69:47:9a:a9:56:
                    30:d4:95:16:ce:2e:b5:73:8d:8e:d8:4c:2c:0e:0d:
                    6d:89:ef:0f:52:ca:05:d2:47:52:82:9b:b7:67:e5:
                    6e:98:b7:42:bd:4a:f2:4c:e7:7d:db:d2:ab:05:03:
                    be:c3:51:83:9a:6b:35:35:34:83:c8:1e:83:99:f8:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CB:CD:7B:A5:C5:F1:2E:05:05:C9:E2:E0:FE:96:24:2A:10:E8:40
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/A8vNe6XF8S4FBcni4P6WJCoQ6EA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.187.0/24
                IPv6:
                  2a00:1578:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:7a:00:5a:89:e9:8c:79:44:35:90:42:95:ac:02:ba:dd:f8:
         b4:bd:01:c2:68:a0:e9:cf:c1:c4:8f:ef:82:9d:bc:12:62:d0:
         9a:30:b3:6f:2a:1b:99:78:a1:70:a0:b0:bf:73:30:aa:97:c6:
         a4:67:e0:ee:c7:19:88:ab:e0:cb:09:c2:72:15:fb:33:10:41:
         85:99:93:9d:e5:e1:d8:29:72:21:5e:b1:9a:4b:5a:5e:95:0d:
         e8:44:6c:f8:83:56:1d:1f:e5:b0:2f:20:d9:e9:5c:e0:ab:48:
         2b:da:02:ec:82:19:b8:8a:83:19:c0:b9:59:42:5f:66:5c:04:
         bb:1f:27:60:c1:1f:e5:81:34:54:46:04:9b:73:84:9d:01:3e:
         10:50:40:4f:f2:dc:96:7b:af:d3:3b:93:2a:fa:84:6a:26:94:
         00:fa:8e:70:ed:69:2e:2e:59:b9:bd:e2:ac:ea:63:56:40:44:
         4d:cf:11:26:25:31:3e:b8:4b:f0:9c:86:10:59:b8:4b:b0:fe:
         b0:56:f8:5f:68:7c:e4:46:f1:92:a7:c7:61:af:a9:d1:66:54:
         0a:77:ef:81:ab:23:f2:52:9e:7d:ff:7a:46:f4:9f:69:22:1e:
         24:fc:ea:e8:7e:00:96:b5:7a:4c:10:7b:70:83:e2:3c:a9:d7:
         19:ad:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:44 2024 by rpki-client on console-ams.rpki-client.org